A null pointer dereference occurs in tcf_ife_encode within the Linux kernel traffic control code. The bug allows the kernel to trigger an OOPS and general protection fault, causing a kernel panic. Such a crash results in a denial of service, potentially leaving the system offline.

The flaw affects the Linux kernel, specifically the 6.19 release candidates rc1 through rc6. Any system running these kernels and using the act_ife qdisc is vulnerable. The generic Linux kernel is also listed as affected.

The CVSS score of 5.5 indicates medium severity; the EPSS is below 1%, suggesting exploitation is unlikely but possible. The vulnerability would be exercised by forging a packet that exercises the act_ife qdisc, which could be triggered by a local user or by a remote network attacker with the ability to send crafted frames. Because no privilege escalation or data disclosure is reported, the primary risk is disruption through kernel crashes, and the kernel provides no mitigation such as restricting the affected code path.